A locking flaw in the Linux kernel AF_IUCV implementation allows local authenticated attackers to cause a kernel panic and denial of service.

This flaw is a race condition vulnerability in the net/iucv getsockopt function, where missing socket locking allows a null pointer dereference when racing recvmsg against getsockopt with low privileges required.

The vulnerability poses a severe threat to system availability, potentially leading to unexpected system reboots and downtime for critical workloads. Based on a CVSS score of 7.8, the high severity rating reflects the capability of a local user to completely crash the operating system kernel, disrupting business operations and dependent services.

Immediate Action: Update the Linux kernel to the latest patched stable releases, such as version 5.10.259, 5.15.210, 6.1.176, or 6.6.143.

Proactive Monitoring: Monitor system logs for kernel panics, stack traces indicating null pointer dereferences in iucv modules, and unexpected reboots.

Compensating Controls: Restrict local shell access and prevent untrusted users from executing arbitrary code or loading unnecessary kernel modules like AF_IUCV.

Public Exploit Available: false

System administrators must prioritize applying the latest kernel patches to resolve this locking deficiency. Immediate deployment of the updated packages will eliminate the race condition and prevent potential local denial of service attacks against the operating system.